JMBpay.my

Legal

Privacy Policy

Last updated 23 October 2026 · Operator: JMBpay (JMBpay.my)

1. Who we are

JMBpay.my (“JMBpay”, “we”, “us”) is digital management software published by JMBpay for Malaysian Joint Management Bodies (JMB) and Management Corporations (MC). When you use the owner app or web portal for a residence, you are using the official digital channel that residence’s management body has subscribed to — not a generic or unaffiliated payments app.

See About JMBpay for entity transparency (publisher vs management body).

2. Data we handle

Depending on how you and your JMB/MC use JMBpay, we process:

  • Contact details — name, phone number, email, mailing address
  • Unit accounts — property/building, unit number, owner roll fields, login identifiers
  • Transaction histories — bills, amounts, due dates, payment status, receipts, Billplz references
  • Identity documents — MyKad / S&P uploads you or management provide for verification (where enabled)
  • Support content — tickets, notices read status, photos attached to reports
  • Device/technical data — app version, push tokens (if notifications enabled), basic security logs

Card numbers for online payments are processed by Billplz (and their banking partners). JMBpay stores payment outcomes and references, not full card PANs.

3. Why we use the data

  • Authenticate owners and show the correct unit ledger
  • Issue bills, accept payments, and generate receipts for the management body
  • Deliver notices, WhatsApp/email reminders, and service tickets
  • Meet strata recovery workflows (e.g. statements, Form 11 packs) instructed by the JMB/MC
  • Secure the service, prevent abuse, and provide customer support
  • Comply with Malaysian law, including the Personal Data Protection Act 2010 (PDPA)

We do not sell owner data for advertising or track users across third-party apps for ads.

4. Who controls and who processes

  • The JMB or MC (or its appointed managing agent) is the data controller for proprietor roll, billing, and notices for that development.
  • JMBpay operates JMBpay as a processor / service provider hosting the software and payment integrations for subscribed properties.
  • Processors may include hosting, email/WhatsApp delivery, and Billplz for collections — only as needed to run the service.

5. Retention & security

Billing and receipt records are kept for the periods required by the management body and applicable law (often multi-year accounting / strata record duties). Account credentials are stored hashed. Access is limited to authorised management users and JMBpay operators under need-to-know controls.

6. Your choices

  • Update phone/email/profile in the owner app or via your management office
  • Request access or correction of personal data held for your unit
  • Ask your JMB/MC (or us) about deletion where legally allowed — some ledgers must be retained

Contact: privacy@jmbpay.my · WhatsApp +60129608400 · or your building’s management office named in the app.

7. Children & demos

JMBpay is for adult proprietors and authorised occupants. Public demo residences use fictional sample data for product demonstration and App Review — not real owner ledgers.

8. Changes

We may update this policy as the product or law changes. The “Last updated” date above will change; material updates may also be noted on jmbpay.my.